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Abstract Multi-agent systems have been studied in various contexts of both appli- 
cation and theory. We take Dynamic Epistemic Logic (DEL), one of the formalisms 
designed to reason about such systems, as the foundation of the language we will 
build. 

BioAmbient calculus is an extension of 7T-calculus, developed largely for appli- 
cations to biomolecular systems. It deals with ambients and their ability to commu- 
nicate and to execute concurrent processes while moving. 

In this paper we combine the formalism of Dynamic Epistemic Logic together 
with the formalism of BioAmbient Calculus in order to reason about knowledge 
maintained and gained upon process transitions. The motivation lies in developing a 
language that captures locally available information through assignment of knowl- 
edge, with potential application to biological systems as well as social, virtual, and 
others. 

We replace the ambients of BioAmbient Calculus with agents, to which we at- 
tribute knowledge, and explore the parallels of this treatment. The resulting logic 
describes the information flow governing mobile structured agents, organized hi- 
erarchically, whose architecture (and local information) may change due to actions 
such as communication, merging (of two agents), entering (of an agent into the inner 
structure of another agent) and exiting (of an agent from the structure of another). 
We show how the main axioms of DEL must be altered to accommodate the infor- 
mational effects of the agents' dynamic architecture. 
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1 Introduction 

We develop a formalism ^si 'SS suited for talking about various multi-agent 
systems. In particular, we discuss previous and potential applications to systems 
of molecular biology, though the language is not limited to this. We develop the 
notion of an agent, which can refer to an entire system or a subsystem thereof, 
all seen as informational (and information-acquiring) systems. Information locally 
available to a given system is treated as knowledge and the flow and exchange of 
information between systems as dynamics of knowledge in a multi-agent setting. For 
all of the above, we rely on a formalism derived from Dynamic Epistemic Logic and 
BioAmbient Calculus. 

We assume the following things about the architecture of these agents: First, the 
number of agents (and thus subagents) is always finite. Second, they are nested in a 
dynamic tree structure (with no loops). 

In addition to typical communication actions, such as sending and receiving in- 
formation or public announcements, we consider three specific actions which in- 
volve mobility: entering, exiting, and merging. The formalisation and the specific 
rules for the latter are inspired largely by Luca Cardelli's developments in BioAm- 
bient Calculus^] which aims to formalize information flow in systems of molecular 
biology. 



2 The formalism and motivation of &si®g£e 

At a given state, an agent is to be defined by an assignment of concurrent processes, 
and in a given process there can occur agents, capabilities, or other non-agent, non- 
capability processes. 



2.1 Basic Definitions 



Let srf be a finite set of agents and srfc a finite set of atomic actions. 



An agent Ae^/ occurs in a process P, or A C P, iff 



'A CA 

A CP=>A \-P | Q 
A CP^A C Q | P 
< A\ = P^A\ = a.P 

where P | Q denotes two processes running in parallel and a.P denotes an action 
capability a, which, if executed, will initiate a process P. 
We define C + as the transitive closure of C: 



1 See ED and fTT] 
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A \— + P 3 a chain Po,P\,...,P„ of processes s.t. n > 0, A = Pq, P = P„, and 
Pi-i E Pi, for all i < n. 



An agent A e srf is a subagent of P, or A < P, iff 



A<A|P 
A<P|A 

A <P^A <P | Q 
v A<P^>A<g|P 



Definition A state s is an assignment of Processes to Agents, s : Agents — > Processes, 
such that for every two distinct agents A,Z? 6 ^ and for any agent Ce 

C E s(A),C E s(B) => A = B and A g+ s(A) (1) 

That is, agent C cannot simultaneously occur in a process assigned to two differ- 
ent agents and an agent cannot occur in a process assigned to itself. 

def 

For a given state s and two agents A,B, we define A < s B = A < s(B). We read 
A < s B as "A is a subagent of (agent) B in state s." 

Consequences 

A < V B^A (2) 
From ([T]) and 0, it follows also that: 

C < S A,C < S B^A=B (3) 

In other words, assignments s(A) and s(B) for different agents A^fi must con- 
tain no agents in common. 

Definition We define <+ as the transitive closure of < s , and call it the iterative 
subagent relation at state s, while referring to < s as the one — step subagent relation. 

A<+B 3 a finite chain Aq,A\, ...,A„ 
s.t. n > 0, A = Aq, B = A„, and A,_i < s A,, for all / < n. 

Consequence [3] in turn disallows loops in the tree of agents: 

Proposition [Tree Property] For A=^B: 

C<tA,C<fB^>A<fBVB<fA. (4) 

Proof. We prove this by induction on the length of the chain. By the hypothesis, 

there must exist two chains, where A^B: 

C=X\ < S X 2 < s < s Xi < s X i+ i <, ... < S X„ =A and 

C — Y\ < s Y 2 < s ■■■Yj-x < s Yj < s Y i+ \ < s ... < s Y m = B. 

Without loss of generality, suppose n <m (the case for m < n is similar). 

Then, by Q, X 2 — Y 2 , and again by ([3J, X 3 = F 3 , and so on until X„ =Y n , => A = Y n . 

Now, if n = m, then A = Y m = B, contradicting the fact that A and B were assumed 

to be distinct. 

If n < m, then A = Y„ < s Y n+ \ < s ... < s Y m = B and we have shown that A <+ B. □ 
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Given a finite set si of agents, denoted by A,B,C,A\, ...,A n , and given a finite 
set sdc of atomic actions, denoted by a, a, , a, we combine the syntax of BioAmbient 
Process Algebra and DEL, adding only the atomic sentence A <+ B, and define the 
sentences of propositional logic together with the one — step subagent relation. <p, y/ 
are formulae and p are propositional sentences in the language: 



Table 1 Syntax and Definitions 



Assume A, B,C are distinct agents. Then: 



P::= | A | (P\P) | EiCii.Pi 

<p ::= A <+ B \ -,<p | <pA<p | £ A <P I DK Au . An (p | [«]<p 

a e {(a A ,afl)} 

a,ai,ae {q>7, <p!, enfer, accept, exit, expel, merge+, merge—} 



(p\J y := -i(-i(p A -'!/') 
9^-1/ ^ -(<PVV) 
(p <=> ip : d =^ (<p => i/) A ( V => <p) 

A < C : d = A <+ C A l\ B€s/ ^(A <+B A B <+ C) 

de f r l 

T : d =^ p V -ip, for some fixed p 
± : d =^ pA^p, for some fixed p 



2.2 Actions 



The set .e/c of atomic actions is finite. Similar to the notions of execut ability, or 
precondition, in DEL, agent A must have the capability a.P included in the pro- 
cesses assigned to it at the initial state in order for a a to take place (agent A executing 
action a). 

The capabilities each agent is assigned at a given state are expressed as a nonde- 
terministic sum of atomic actions Y. a i-Pi, eacn of which is attached to the process 

i 

that would initiate as a result of A performing a given atomic action. 
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Following the Bioambient improvement on Ambient Calculus, we only allow suit- 
able action pairs to induce state transitions. A cell has to accept a virus that is trying 
to enter, just like an announcement must be heard in order for it to affect an agent's 
knowledge. 

We define actions a as dual pairs of atomic actions, which form a finite set is£ c: 

a = (a, a) £ g/c x srf c = is^c. 

We use B : s a to denote agent fi's participation in action a at state s. For a = 

(OA,ac): 

B : s a d = AK+BVC <+ B and 3s' s.t. s 4 s' 

We define four types of actions, of which three involve a one — step superagent 
E whose state assignment is crucial to the executability of the action (see Figure 1). 

For any agents A,C,E that are distinct: 
ai = ((p?A,<p!c), 
an = (enter k^acceptciE}, 
0!/// = (exitA,expelc,E), 
a IV = (merge+A,merge- c ,E) 



n [P\Q\m[R]} 



Fig. 1 Motivated by work 
of Luca Cardelli (see |9|- 
1 1 1]), this figure depicts the 
application of this language 
to molecular biology. B, C, 
and D show the change in 
structure of processes and 
subprocesses as a result of 
acting on dual capabilities 
(Types II, III, IV, respec- 
tively), separated by no more 
than two "membranes." In 
^s^QlS^, we can think of 
each "membrane" with all its 
contents as a unique agent. 







© L© 



J3 m[enter c. P\Q\ | n[accept c. R\S] -> n[R\S | m[-P|<3]] 









m 

©® 


n 
© 



Q n[m[exit c. P\Q] | expel o. H|S] -> m[P\Q] | n[R\S] 





v_^0 




) m[merge+ c. P\Q] | n.[merge- c. R\S] -» m[P\Q\R\S] 


m 

© 


© " 


0- 
© © 



We now define the state transitions for the four different types of actions. 

Type I For aj = (aA,ac), where (a,a) = ((pi, (pi): 
s%s> iff 

3 a,ai,P,Pi,Q such that s(A) = £,a,.P, + a..P | Q, 

3 a,Cj,R,Rj,S such that s(C) — J^jCj.Rj + a.R \ S, 

s'(A) =P\ Q, s'(C)=R\ S, s'(X)=s(X), for all X +A,C. 
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This is the only type of action that does not change the structure of the tree of 
agents. 

Type II For an = (ciA,ac,E) where a = enter, a = accept: 
s^s' iff 

3 a,a h P,Pi,Q such that s(A) = £ ( a ( .^+a.P | Q, 
3 a,cj,R,Rj,S such that s(C) = ^jCi-Rj+a.R \ S, 
3 r, a process, such that s(E) =A\C\T, and 

s'(A) = P\ Q,s'(C) =A\R\S, s'(E)=C\r,s'(X)=s(X), for all X ^ A,C,E. 

After a,u state transition, agent C is assigned a new agent, while agent E - 
the initial superagent of both C and A - is stripped of the one — step subagent A: 
E ^ E 

AC C 



Type III For am = (aA,ac,E) where a = exit, a = expel: 

a Hl i 

s-^s iff 

3 a, ai,P,Pi,Q such that s(A) = Y,iai-Pi + a.P \ Q, 
3 a,Cj,R,Rj,S such that s(C) = LjCi-Rj +a.R \A\S, 
3 r, a process, such that s(E) = C \ F, and 

s'{A)=P\Q, s'(C)=R\S, s'(E)=C\A\r, s'(X)=s(X), for all X ^ A,C,E. 

After am this state transition, the effect is exactly opposite to that of transitions 
by actions of Type II: 



AC 



Type IV aiv, defined as (aA,ac,E) where a = merge+, a = merge—: 
s^s' iff 

3 a,aj,P,Pi,Q such that s(A) = £ ( a,.P ( +a.f | Q, 
3 a,cj,R,Rj,S such that s(C) = Y.j c i-Rj + a.R \ S, 
3 r, a process, such that s(E) =A\C\T, and 

s'(A) = P\ Q\R\S, s'{C) =0, =A | T, =j(X), for all X ^ A,C,£. 

E ^ E 

AC A 
The following validities follow immediately from the definitions, where, as in 
DEL, 

< a,- > T denotes executability of a,-, and [a,-]<p denotes a statement 9 that holds 
true after action a,: 
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Table 2 Consequences of Action Definitions 
Assume A,C,E are distinct agents. Then: 



<a n >T => A<EAC<E 

< am > T => A < C A C < £ 

< a /v > T =>A<£AC<£ 
[a n ]A < C 

[a m ]A < E 




2.3 Indistinguishability Relations on States and Actions 

As in Epistemic Logic (EL), we define indistinguishability of two states for a par- 
ticular agent A, denoted by <~a, in order to reason about knowledge. 

Definition [Indistinguishability of states] s ~a s' iff s(X) = s'(X), for all X <+ A. 

That is, two states are equivalent for agent A if and only if they are indistin- 
guishabe for A and all of its subagents, as assigned at state s. Two states can be 
indistinguishable for a group of agents B\ 7 ...,B„ if none of them can distinguish 
between these states: 

Definition [Indistinguishability of states for a group of agents] s ~b 1 ,...,b„ s' iff 
s(X) = s'(X), for all X <+ B u for all 1 < i < n. 
We define indistinguishability of actions: 

Definition [Equivalence of actions] Here s represents any state in the history. 



A i 



[either A : s a and a = a' 
or -^A : s a and ^A : s a' 



If A is a participant in a, then it would certainly be able to differentiate between 
taking part in two different actions a and a', unless they were actually the same. On 
the other hand, if A does not participate in either a ot a', then both actions appear 
equivalent to A. This implies that A is a subagent of both agents executing a. 



3 Semantics 



We will evaluate logical formulas on histories, which are sequences of states and 
actions (representing possible histories of a system). However, in order to define 
the semantics for epistemic and dynamic modalities, we need to define appropri- 
ate (epistemic) indistinguishability relations and (dynamic) transition relations on 
histories, by lifting to histories the corresponding state relations. 
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3.1 Relations on Histories 

To ensure that our knowledge is accumulative, as in DEL, we must expand the lan- 
guage to include Perfect Recall and extend equivalence relations to state transitions 
and to previous states. For this we define histories and develop axioms based on 
histories rather than states. 

We define a history has a sequence of alternating states and actions: 

h = {so,ao,si,ai,...,s n -i,an-i,s n ) s.t. 

Sj ^ s i+ i for all i <n. 

• (h,a,t) := (s() 7 aQ,s u au---,s„-i,a„-i,s„,a,t) iff s„ 4 1 

• \h\ denotes the size of the history, equal to the number of state-action pairs in the 
history, not counting the final state 

• last(h) — s n . We use the convention of h |— <p iff last(h) \= <p, read "history h 
satisfies statement <p if and only if the last state in history h satisfies statement <p" 

We extend the notion of state indistinguishability to history indistinguishability 
for an agent A. 

Definition [Equivalence of histories] 

Let h = (so,Oo,si,(Xi,...,Si, a,-, ...,a„-i,s n ) and 

let h! = (s' X , s[ , a[ , . . . , s' t , a\ , . . . , a' n _ l , s' n ) , then 

h~ ti -^Vie {0, 1,2, ....«} : \h\ = \h'\ and i,- ~ s- and a,- ~ J; a[ 

Definition [History transition] 
For two histories h, h', 
hAti iff Bts.t. h' = (h,a,t). 

Proposition [Perfect Recall] This follows from the definitions above and ensures 
uniqueness of history transitions. 

h' ~ c h",ti = (h u a,s'),h" = (h 2 ,P,s") => \h 1 \ = \h 2 \,h 1 ~ c h 2 ,a~cP. 

Proposition Indistinguishable histories for an agent remain indistinguishable for 
its subagents in the last state: 

h~ch',A<+ st{h) C => h~ A h! 

Proof. Sj(X) = s'^X), for all i, for all X <+ C implies the same for X < + A since A 
is a subagent of C. 

Now, for each a, &>[ m the histories, if C is not a participant of a and they appear 
to be the same, then by definition of participation the same holds for A since it is a 
subagent. 

If C : Sj a, then a, = a-. In this case, regardless of whether or not A participates in 
a, the two appear the same to it. □ 

The definition for equivalence of histories for a group of agents is similar: 
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3.2 Semantics 

The semantics of our language is embodied by a satisfaction relation |= between 
histories and logical formulas, which is defined by the inductive clauses in Table 3. 
The definition is by induction on formulas. For A,B,B\ , ...,fi„, distinct, € stf : 



Table 3 Semantics 



h E A <+ B iff A <t .. , B 
i last\h) 

h\=^(p iff h y= ip 

h \= <p A y iff h |= (p and ft |= y 

A |=XA«p iff V(ft' ~a A) : ^ h <P 

A H DK Bu ..., Bn (p iff V(ft' ~b, ,...,«„ ft) : ft' h <P 

ftHglg iffV/iA/;': h'\=q> 



4 Proof System 

We use axioms and rules of inference from propositional logic and those of DEL^J 
together with those specific to our formalism. In addition, we outline reduction laws, 
with select proofs. In this section, A, B,C,X,Y,Bi, ...,B n ,A\ , ...,A„ are agents e stf ' . 



Table 4 Axioms of Knowledge 





h DKa<P 


^ K A (p 


Gl 


hK A (p 


=4- DK AiS} Bn q> 


KtoDK 


\~A<+C 


=> K C {A <+ C) 


KOwn 


\-A<+C A C<+B 


=> DK BAi ,...a,M< + 


C) DKOwn 


B U ....B„ <+ A A DK Bl 


fi „(f> =S> K A (p 


KfromDK 





2 These include the Necessitation and the Modus Ponens rules of inference, as well as KT45 axioms 
and all tautologies of propositional logic. See 1 13 1 for more description. 
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Proof. [KOwn] The right hand side of the statement is equivalent to Vh' (h h' =>■ 
h' \= A < + C). By the definition of equivalence, we have that Vz, SiiX) — s^(X), for 
all X < + C, which implies that state assignments, for all states in histories h, h' will 
be the same for C and its subagents. 

But then last(h)(X) = last(h'){X) will also hold true for X = C and X = A and all 
agents in between them, thus satisfying hi |= A < + C. □ 

Axioms R, Trans, and Tree reveal the loop-less tree structure of agents. 
Axiom R h ^A <+ A 

Axiom Trans h A <+ BAB <+ C A <+ C 

Axiom Tree h (X <+ A AX <+ B) => (A <+ BVB <+ A) 



Proof. [Axiom Tree] For s = last(h), the statement is semantically equivalent to 
X <f A and X <f B, for some state s. But then by Q, we guarantee that B <+ A or 
A <+ B, which is semantically equivalent to the desired result. □ 

We now explore reduction laws involving the dynamic modality. 



Partial Functionality Axiom [a]^q> <^ (< a > T =$> ->[a]q>) 



That is, the transition induced by a, if it exists, goes to a unique next state: if 
h—>h' and h A h" , then hi — h" . This ensures uniqueness of transition. 

The Preservation of Facts axiom of DEL demands several versions for the differ- 
ent types of actions (see Table 5). 

Proof. [PF4a] We unwrap the definition for Type IV action, found in |2.2.1| where 
s = last(h). It follows: 

If X < C at last(h), then XCS (occurs in process S). 

Since s'(X) = s(X), for all X ^ A,C,E, then X still occurs in S at s'. 

Since s'(A) is assigned process S, where X occurs, then X must be a subagents of A 

at s'. □ 

Similarly, the Action-Knolwedge reduction laws are expanded for specificity (see 
Table 6). 

Note that the final rule in Table 6 is for non-participants of any action a. All 
proofs are achieved by a counterfactual argument of "chasing the diagram," though 
we omit them here. 
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[ai]<p 


4=> 


(< (Xi > T =4> <p) 


PF1 


For X ^ A: 








[a„]X < Y 




(< a// > T =s> X < y) 


PF2a 


For Y^E,C: 








[a„]A < ¥ 




(< a n > T => A < Y) 


PF2b 


For X ^ A: 








[a,„]X < Y 




(< a/// > T =*■ X < Y) 


PF3a 


For Y ^E,C: 








[a m }A < Y 




(< a/// > T => A < Y) 


PF3b 


(X<C) 




[a IV ]{X<A) 


PF4a 


ForX^C: 








^(X<A) =¥■ 


{[a IV ]X < F <=> 


(< a,v > T => X < Y)) 


PF4b 



a Note that the Consequences outlined in Table 2 also belong to this category of reduction laws. 
Table 6 Action-Knowledge Axioms 



For X=A,C: 


[a,]K x <p 


■ef- 


(< a r > T K x [ai]q>) 


AcKnla 


(A <+X\JC<+X) => 


[ai\K x <p 


ts- 


(<a I >T ^K x [ai\<p) 


AcKnlb 




[a n }K C (p 




(< a n > T =>■ DK Ai c[a n ]<p) 


AcKn2a 


C<+X^> 


[a H ]K x <p 




(< a n > T K x [a n ]q>) 


AcKn2b 




[a n }K A <p 




(< a H > T K A [an]<p) 


AcKn2c 


For X=A,C: 


[am]K X (p 




(< «/// > T => AT x [a///]9) 


AcKn3a 


A<+X^ 


[a n i]K x <p 




(< a/// > T => Kx[a///](p) 


AcKn3b 




[a IV ]K A <p 




(< a/v > T => DXA,c[a/v]fl>) 


AcKn4a 


A <+ X => 


[aiv]K X (p 




(< a IV > T => AT x [a/v]«p) 


AcKn4b 


{X<+AAX<+ C)=> 


[a]K x <p 




A/j 6 t^c+,p~ y a(< g > J g [gig) AcKnNP 



Theorem The proof system for gPsrf 'SiSS^ is sound. 

Proof. In order to show soundness, all axioms in the system must be valid. For all 
axioms presented in gray boxes, validity was either proved in the text or it follows 
from the semantic definitions. □ 

Theorem [Model-checking] The model-checking problem for \si '3 *£ 'Jz? is de- 
cidable on finite models. 

Proof. Given a model M with a countable set of histories h and formula <p, the 
axioms and rules of inference are sufficient to decide whether or not <p is satisfiable 
at M,h, since we have provided axioms for all syntactic combinations of terms <p 
can have. □ 
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Corrollaries The following are semantically valid consequences of axioms and 
rules of inference: 



• \- A <B =>■ A < + B 

• \-X<A^^X<B 

• \-A < + C A C < + Bi,...,B„ ^ DK Bl Bn (A <+ C) 

• hA<+C A C<+B K B {A<+C) 

• \-B l ,...,B n <+ A A DK Bl BnA (p K A (p 

• (X<+A) [a///]-.(X <+C) 



5 Conclusion 

We have thus developed a sound, decidable language S)§J£ based on a nested 
tree structure of a finite number of agents, which are defined by concurrent pro- 
cesses, subagents and capabilities. Furthermore, we developed the notion of knowl- 
edge and distributed knowledge for agents based on 

1. the currect state of an agent, which captures its current one — step subagents and 
its current capabilities for future interactions 

2. the current state of all of its iterative subagents. This encodes a principle of 
monotonicity of information: all information carried by a subagent is available 
to any of its superagents 

3. the memory of an agent, encoded in a history that each agent perceives differ- 
ently. Following the premises of DEL, information is never lost and contradictory 
knowledge is never acquired. 

The presented axiomatization allows one to reason about knowledge and change in 
knowledge of agents executing actions, as well as their subagents and superagents. 
Further applications to biological systems remain to be explored, in particular seek- 
ing to define "knowledge," as described by indistinguishabilities, for a given biolog- 
ical unit. It also remains to investigate whether the system is complete. 
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